mlefe, I think the subject of the original message from Rod has misled you. This is not inbound mail, it is a non-delivery report from the recipient's server. The Spammer has used Rod's server as the origin of a bulk mail message and when some of the addresses are undeliverable he gets the NDRs. Brian -----Original Message----- From: mlefe@xxxxxxxxx [mailto:mlefe@xxxxxxxxx] Sent: Thursday, May 02, 2002 8:33 AM To: [ISAserver.org Discussion List] Subject: [isalist] RE: Help me : Inbound mail http://www.ISAserver.org If they are for OTHER domains, you may want to report it to your ISP to see why they are being routed to you by their equipment. Maybe their DNS Servers are compromised, or yours ?? -----Original Message----- From: Rod@xxxxxxxxxxxxxxxxxxxx [mailto:Rod@xxxxxxxxxxxxxxxxxxxx] Sent: Thursday, May 02, 2002 7:43 AM To: isalist@xxxxxxxxxxxxx Subject: [isalist] Help me : Inbound mail http://www.ISAserver.org No one has any suggestions on my inbound mail problem? I am getting a bunch of mail directed to other domains. They are all e-mails promoting viagra. They all seem to be coming from the same place " btamail.net.cn" Here is an example of what I am getting: The following recipients did not receive the attached mail. Reasons are listed with each recipient: <goamerica@xxxxxxxxxxxxxx> goamerica@xxxxxxxxxxxxxx MSEXCH:IMS:Pinkerton Academy:PA:PAEXCHSVR 3500 (000B09AA) 500 error in command Rod Rodriguez Director, IT Services Pinkerton Academy 603-437-5200 Ext 1117 Rod@xxxxxxxxxxxxxxxxxxxx ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: mlefe@xxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: brianh@xxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')